mykytastel/RepoPilot

Review Git changes for security boundaries, behavioral risk, and blast radius

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Stale
License: None

Inputs

name	description	required	default
command	Command to run: scan \| review \| ai-context	no	scan
format	Output format: auto \| console \| json \| markdown \| sarif. auto uses sarif for scan, JSON for review, and Markdown for ai-context.	no	auto
path	Path passed to scan, review, or AI commands.	no	.
config	Optional repopilot.toml path.	no	""
baseline	Optional baseline path for scan/review.	no	""
fail-on	Optional scan/review failure threshold, e.g. new-high.	no	""
fail-on-priority	Optional scan/review failure threshold by risk priority: p0 \| p1 \| p2 \| p3.	no	""
fail-on-review	Optional review-signal gate: none \| definitely.	no	none
scope	Review scope: changed \| full.	no	""
profile	Finding visibility profile: default \| strict.	no	""
min-severity	Optional minimum rendered severity, e.g. high.	no	""
min-priority	Optional minimum rendered risk priority: p0 \| p1 \| p2 \| p3.	no	""
rule	Optional scan rule filter. For multiple rules, provide a space-separated list of rule IDs.	no	""
timing	Print per-phase scan timing breakdown for scan commands.	no	false
base	Optional Git base ref for review.	no	""
head	Optional Git head ref for review; requires base.	no	""
focus	Optional AI focus: security \| arch \| architecture \| quality \| framework \| all.	no	""
budget	Optional AI token budget: 2k \| 4k \| 8k \| 16k or a positive integer.	no	""
output	Optional output path for commands that write reports.	no	""
receipt	Optional audit receipt JSON path for scan.	no	""
args	Advanced extra CLI arguments appended after typed inputs. Prefer typed inputs for CI workflows.	no	""
version	GitHub Release version to install and checksum-verify.	no	0.20.0
upload-sarif	Automatically upload SARIF output to GitHub Code Scanning	no	false
comment	Update a sticky PR comment. Requires pull-requests: write.	no	false

Outputs

name	description
sarif-file	Path to the generated scan or review SARIF file.
receipt-file	Path to the generated audit receipt JSON file (only set when receipt is provided for scan)
review-json-file	Path to the generated review JSON file.
review-sarif-file	Path to the generated review SARIF file.
delta-json-file	Path to the deterministic base/head finding delta JSON file.
conclusion	RepoPilot conclusion: passed or failed.
findings-count	Number of in-diff findings.
new-findings-count	Number of findings introduced relative to the base revision.
changed-findings-count	Number of finding occurrences changed relative to the base revision.
resolved-findings-count	Number of findings resolved relative to the base revision.
signals-count	Number of review signals.
gate-result	Review gate status.
exit-code	RepoPilot process exit code.